mirror/geerlingguy-ansible-for-devops
1
0
Fork 0
mirror of https://github.com/geerlingguy/ansible-for-devops.git synced 2024-05-19 06:50:03 +00:00
Code Issues Releases Activity

Issue #83: Vastly simplify the initial Nginx https server config.

Browse Source
This commit is contained in:
Jeff Geerling
2018-01-03 21:25:48 -06:00
parent 7330cc53e1
commit d5029c73cd
1 changed files with 0 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
https-self-signed/provisioning/templates/https.test.conf.j2
-17
View File
@@ -12,25 +12,8 @@ server {
server {
listen 443 ssl default_server;
server_name {{ server_hostname }};
index index.html;
root {{ nginx_docroot }};
ssl_certificate {{ certificate_dir }}/{{ server_hostname }}/fullchain.pem;
ssl_certificate_key {{ certificate_dir }}/{{ server_hostname }}/privkey.pem;
ssl_trusted_certificate {{ certificate_dir }}/{{ server_hostname }}/fullchain.pem;
ssl_session_timeout 1d;
ssl_session_cache shared:SSL:50m;
ssl_session_tickets off;
ssl_protocols TLSv1.2;
ssl_ciphers EECDH+AESGCM:EECDH+AES;
ssl_ecdh_curve secp384r1;
ssl_prefer_server_ciphers on;
ssl_stapling on;
ssl_stapling_verify on;
add_header Strict-Transport-Security "max-age=15768000; includeSubdomains; preload";
add_header X-Frame-Options DENY;
add_header X-Content-Type-Options nosniff;
}